A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-perl | Jul 21, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade ImageMagick | May 13, 2025 | Jul 19, 2023 |
| Amazon_linux_2023 | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-libsUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debugsourceUpgrade ImageMagick-c++ | Feb 17, 2025 | Jun 27, 2023 |
| Debian | — | Upgrade imagemagick | Feb 26, 2024 | Oct 4, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-devUpgrade imagemagick-6-common (Ubuntu Pro)Upgrade libimage-magick-q16-perlUpgrade imagemagick-commonUpgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-devUpgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade libimage-magick-perlUpgrade perlmagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6-headersUpgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-devUpgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade libmagickwand-devUpgrade libmagick++-devUpgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagickcore-6.q16-devUpgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16hdriUpgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-dev (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-devUpgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade imagemagick-6-commonUpgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro) | Jul 5, 2023 | Jul 4, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub